GitLab Product Security Update Advisory

May 27 2024

Overview

An update has been released to address vulnerabilities in our GitLab products. Users of affected versions are advised to update to the latest version.

Affected Products

CVE-2023-6371

All versions of GitLab CE/EE prior to 16.8.5
All 16.9.x versions of GitLab CE/EE prior to 16.9.3
All 16.10.x versions of GitLab CE/EE prior to 16.10.1

CVE-2024-2279

GitLab CE/EE versions: 16.7 (inclusive) to 16.8.6 (excluded)
All 16.9.x versions of GitLab CE/EE prior to 16.9.4
All 16.10.x versions of GitLab CE/EE prior to 16.10.2

CVE-2024-2829

GitLab CE/EE versions: 12.5 (inclusive) to 16.9.6 (excluded)
All 16.10.x versions of GitLab CE/EE prior to 16.10.4
All 16.11.x versions of GitLab CE/EE prior to 16.11.1

CVE-2024-4835

GitLab CE/EE versions: 15.11 (inclusive) to 16.10.6 (excluded)
All 16.11.x versions of GitLab CE/EE prior to 16.11.3
All 17.0.x versions of GitLab CE/EE prior to 17.0.1

CVE-2024-2434

All 16.9.x versions of GitLab CE/EE prior to 16.9.6
All 16.10.x versions of GitLab CE/EE prior to 16.10.4
All 16.11.x versions of GitLab CE/EE prior to 16.11.1

CVE-2024-3092

All 16.9.x versions of GitLab CE/EE prior to 16.9.4
All 16.10.x versions of GitLab CE/EE prior to 16.10.2

CVE-2024-4024

GitLab CE/EE versions: 7.8 (inclusive) to 16.9.6 (excluded)
All 16.10.x versions of GitLab CE/EE prior to 16.10.4
All 16.11.x versions of GitLab CE/EE prior to 16.11.1

Resolved Vulnerabilities

Stored XSS vulnerability in wiki pages via the Banzai pipeline in GitLab CE/EE (CVE-2023-6371)

Stored XSS vulnerability inGitLab CE/EE via autocomplete results (CVE-2024-2279)

ReDoS vulnerability due to unauthentication in FileFinder when using a wildcard filter in project file search in GitLab CE/EE (CVE-2024-2829)

One-click account takeover vulnerability via XSS leveraging VS Code Editor (Web IDE) in GitLab CE/EE (CVE-2024-4835)

Path traversal vulnerability in GitLab CE/EE allows DoS and file read restriction vulnerability (CVE-2024-2434)

Stored XSS injected in the diff viewer in GitLab CE/EE (CVE-2024-3092)

GitLab account takeover vulnerability under certain conditions when using Bitbucket as an OAuth provider in GitLab CE/EE (CVE-2024-4024)

Vulnerability Patches

Vulnerability patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

CVE-2023-6371